Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
File:                     yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json)
Hash identifier:          0cSq+UDeJLHT4eFzyqNb4vOgmbS6zNcCpcxzjI5/mvU=
Subject key identifier:   2C:05:E4:2F:F6:29:F1:BB:C1:C3:65:4D:D4:30:DF:B9:60:95:5F:01
Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44
Certificate issuer:       /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
Certificate serial:       0AFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
Manifest number:          127C
Signing time:             Tue 24 Mar 2026 19:08:15 +0000
Manifest this update:     Tue 24 Mar 2026 19:08:14 +0000
Manifest next update:     Tue 31 Mar 2026 19:08:14 +0000
Files and hashes:         1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: ZKYYRtL/oWjEWoEvInGQY6w9BnfTAL78JZfaIL5cHQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2813 (0xafd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
        Validity
            Not Before: Mar 24 19:08:14 2026 GMT
            Not After : Mar 31 19:08:14 2026 GMT
        Subject: CN=69c2e11e-1507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:16:ba:bc:22:31:8c:62:ba:09:fb:96:e3:
                    35:21:fd:fd:9d:eb:4a:f2:dc:f0:b6:46:5e:3c:90:
                    89:ff:1a:c1:f2:e1:50:71:b8:ce:ce:94:72:40:15:
                    db:ec:34:9a:5f:8f:da:d8:ec:8a:e5:47:43:5f:ea:
                    4b:f8:d6:0b:73:44:3e:41:0b:07:a4:98:39:1d:3b:
                    7d:dd:66:d9:0b:a7:82:cb:03:0a:10:ce:4a:51:be:
                    fc:85:6c:8b:20:0a:01:aa:9e:5b:ed:4b:ee:e2:d5:
                    01:3a:cf:cb:2c:03:f9:c3:b3:d9:f9:5c:fd:ec:fd:
                    e2:96:f3:2e:c2:56:25:dc:0a:80:fe:c7:63:ee:a2:
                    71:18:cf:21:75:b1:ca:44:a4:a9:d7:aa:e1:d1:19:
                    92:4c:93:5d:1f:a2:0f:6d:af:c6:a5:b3:1b:d3:73:
                    dd:9a:80:47:ab:3a:40:4f:f1:32:c8:d9:83:17:ba:
                    09:47:07:2b:85:7e:8d:37:f7:82:6c:2d:c6:54:92:
                    0e:78:32:ab:f5:09:21:82:81:2d:f9:80:6d:65:3e:
                    ce:e9:49:7b:21:01:34:a8:3b:a2:92:11:c0:20:08:
                    0f:5f:89:c2:84:9f:28:dc:5b:1f:c7:82:9f:a6:45:
                    01:50:06:bc:cc:d8:6b:2b:66:87:c0:e7:0d:0b:13:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:05:E4:2F:F6:29:F1:BB:C1:C3:65:4D:D4:30:DF:B9:60:95:5F:01
            X509v3 Authority Key Identifier:
                keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e5:62:4f:55:e7:54:38:4b:06:d3:18:46:f4:8d:d9:6d:eb:
         f0:5c:7b:cd:9c:3f:ad:24:4b:66:c7:bc:c7:99:05:d2:8e:5e:
         60:1d:4f:26:3d:fa:48:b8:1a:3b:d6:5a:e7:9d:15:eb:cf:ba:
         b3:b5:b4:74:13:e4:fc:a5:9c:b1:f3:1c:8d:15:96:95:0a:c4:
         e2:6b:fe:09:01:d2:e2:9d:20:01:ab:e2:e3:29:be:e4:15:9b:
         08:9f:fc:5c:f7:11:0b:e7:78:7e:a9:80:cc:ff:8c:33:5e:4c:
         c9:2f:d2:82:0c:ad:93:a8:69:7c:86:e1:47:11:6a:0d:2c:e1:
         9c:38:5a:15:af:53:da:94:df:f3:86:34:02:04:41:44:53:1f:
         3f:d0:f8:ca:be:94:fe:4e:3c:1d:e6:64:94:8e:30:72:b0:6c:
         22:6c:d6:03:90:16:32:4b:b5:df:a6:19:86:e1:63:43:45:3a:
         2d:d1:df:e3:c1:23:03:05:c3:90:72:50:9d:3a:a2:8b:8d:de:
         c7:89:cb:9d:e6:fe:59:12:34:86:d0:9c:56:7c:64:0f:74:5f:
         26:9c:99:52:f6:e1:a2:e9:fd:59:3a:62:d9:a1:38:f9:f9:d7:
         c8:c9:cf:f1:d4:22:5a:00:be:15:33:33:65:bb:9c:88:8f:56:
         9e:71:99:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:09:45 2026 by rpki-client